moved api keys out of source control